> The CFID and CFTOKEN variables are ALWAYS on the "session"
> level, so as soon as you close the browser, they go

By default, this is incorrect. The CFID and CFTOKEN cookies are persistent,
and have a ridiculously long time until they expire. If you want the
connection to the session to be destroyed when the browser is closed, you
need to write the cookies yourself without specifying an expiration value in
your CFCOOKIE tags, or use the J2EE session option available in CFMX.

Dave Watts, CTO, Fig Leaf Software
http://www.figleaf.com/
phone: 202-797-5496
fax: 202-797-5444
[Todays Threads] [This Message] [Subscription] [Fast Unsubscribe] [User Settings]

Reply via email to